Contact Form (Unknown) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2025-05-15. Vendor: Unknown.

CVEs of Contact Form

• CVE-2024-10504 - CVSS 5.4 (medium), 2025-05-15: The Contact Form, Survey, Quiz & Popup Form Builder WordPress plugin before 1.7.1 does not sanitise and escape some parameters when outputting them in the…
• CVE-2021-24907 - CVSS 6.1 (medium), 2021-12-21: The Contact Form, Drag and Drop Form Builder for WordPress plugin before 1.8.0 does not escape the status parameter before outputting it back in an attribute,…
• CVE-2021-24718 - CVSS 4.8 (medium), 2021-12-06: The Contact Form, Survey & Popup Form Plugin for WordPress plugin before 1.5 does not properly sanitize some of its settings allowing high privilege users to…